Multiple format string vulnerabilities in (a) OpenBOR 2.0046 and earlier, (b) Beats of Rage (BOR) 1.0029 and earlier, and (c) Horizontal Shooter BOR (HOR) 2.0000 and earlier allow remote attackers to execute code via format string specifiers in configurations used in various mod files, as demonstrated by the (1) music identifier in data/scenes/intro.txt, which is not properly handled in the update function, and (2) background identifier in data/easy/1aeasy.txt, which is not properly handled in the shutdown function.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://aluigi.altervista.org/adv/borfs-adv.txt - Exploit, Vendor Advisory | |
| References | () http://secunia.com/advisories/20173 - Vendor Advisory | |
| References | () http://secunia.com/advisories/20174 - Vendor Advisory | |
| References | () http://secunia.com/advisories/20181 - Vendor Advisory | |
| References | () http://www.osvdb.org/25687 - | |
| References | () http://www.securityfocus.com/bid/18088 - | |
| References | () http://www.vupen.com/english/advisories/2006/1901 - | |
| References | () http://www.vupen.com/english/advisories/2006/1902 - | |
| References | () http://www.vupen.com/english/advisories/2006/1903 - | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/26582 - |
Information
Published : 2006-05-22 23:10
Updated : 2024-11-21 00:11
NVD link : CVE-2006-2537
Mitre link : CVE-2006-2537
CVE.ORG link : CVE-2006-2537
JSON object : View
Products Affected
openbor
- openbor
horizontal_shooter_bor
- horizontal_shooter_bor
senile_team
- beats_of_rage
CWE